nat的问题

做了nat,公网可以访问到端口，但是访问不到应用？什么原因？

这个是配置，帮忙看看有没有问题？
[BEGIN] 2021/7/14 17:01:31<CY_VPN_RT_1>dis <CY_VPN_RT_1>display cur <CY_VPN_RT_1>display current-configuration # version 5.20, Release 2318# sysname CY_VPN_RT_1# nat address-group 1  address 10.1.1.3  10.1.1.3# domain default enable system# telnet server enable# dar p2p signature-file flash:/p2p_default.mtd# port-security enable# undo ip http enable# password-recovery enable#acl number 2001 rule 0 permit#acl number 3000  rule 1 permit ip source 60.3.5.31 0 destination 172.24.40.132 0 rule 2 permit ip source 60.3.5.32 0 destination 172.24.40.132 0 rule 3 permit ip source 60.3.5.31 0 destination 172.24.54.87 0 rule 4 permit ip source 60.3.5.32 0 destination 172.24.54.87 0 rule 5 permit ip source 60.10.4.33 0 destination 172.24.54.87 0 rule 6 permit ip source 60.10.4.34 0 destination 172.24.54.87 0 rule 7 permit ip source 60.10.4.33 0 destination 172.24.40.132 0 rule 8 permit ip source 60.10.4.34 0 destination 172.24.40.132 0 rule 100 deny ipacl number 3100 description Telent rule 5 permit ip source 60.16.25.200 0 rule 10 permit ip source 60.1.16.91 0 rule 15 permit ip source 60.1.16.211 0 rule 20 permit ip source 60.1.16.40 0 rule 25 permit ip source 60.1.240.58 0 rule 30 permit ip source 222.90.75.34 0 rule 100 deny ipacl number 3999 rule 1 permit ip destination 60.1.240.49 0#vlan 1#               domain system access-limit disable state active idle-cut disable self-service-url disable#ike proposal 1 encryption-algorithm aes-cbc 128 dh group2#ike dpd vpn1#ike peer vpn1 proposal 1 pre-shared-key cipher $c$3$zCyG8azG1H24c Su1aFDQNXl4nxNBwjRpQDM remote-address 211.152.0.147 dpd vpn1#ipsec transform-set vpn1 encapsulation-mode tunnel transform esp esp authentication-algorithm sha1 esp encryption-algorithm aes-cbc-128#ipsec policy 983041 1 isakmp connection-name vpn1 security acl 3000 ike-peer vpn1 transform-set vpn1 sa duration traffic-based 200000000 sa duration time-based 3600#user-group system group-attribute allow-guest#local-user admin password cipher $c$3$POM6W2igfTX1CDbtvPfB0UXQxJGOIqIOdMmK6vy4 authorization-attribute level 3 service-type telnet service-type web#cwmp undo cwmp enable#controller E1 0/0#               interface Aux0 async mode flow link-protocol ppp#interface Cellular0/0 async mode protocol link-protocol ppp#interface Ethernet0/0 port link-mode route#interface Ethernet0/1 port link-mode route nat server 1 protocol tcp global current-interface 4430 inside 60.1.240.49 4430 ip address 111.21.246.34 255.255.255.240 ipsec policy 983041#interface Ethernet0/2 port link-mode route nat outbound 3999 address-group 1 ip address 60.1.240.57 255.255.255.252#interface NULL0 #interface LoopBack0 ip address 10.1.1.1 255.255.255.255#interface LoopBack10 ip address 10.1.1.2 255.255.255.255#interface LoopBack11 ip address 10.1.1.3 255.255.255.255#interface Vlan-interface1 ip address 192.168.1.1 255.255.255.0#interface Ethernet0/3 port link-mode bridge#interface Ethernet0/4 port link-mode bridge# ip route-static 0.0.0.0 0.0.0.0 111.21.246.33 ip route-static 60.1.240.49 255.255.255.255 60.1.240.58 ip route-static 60.3.5.31 255.255.255.255 60.1.240.58 ip route-static 60.3.5.32 255.255.255.255 60.1.240.58 ip route-static 60.10.4.33 255.255.255.255 60.1.240.58 ip route-static 60.10.4.34 255.255.255.255 60.1.240.58# load xml-configuration# load tr069-configuration#user-interface tty 12user-interface aux 0user-interface vty 0 4 acl 3100 inbound authentication-mode scheme#return<CY_VPN_RT_1>                         <CY_VPN_RT_1><CY_VPN_RT_1><CY_VPN_RT_1>[END] 2021/7/14 17:01:59